Dashboards & Visualizations

drilldown from a dashboard for each cell

surekhasplunk
Communicator

My dashboard shows below 3 fields
Department_name, Permanent_Count, Temp_Count
computers, 10,5
electricals, 20,7
mechanical, 15, 10

Now permanent_count and Temp_count are calculated fields which is sum of a field from my input lookup file depending on many criteria like region, band etc.

So if i do a condition match with click.value2 and search for that value say 10 that wont exist in my look up file, since thats a calculated field not a direct one.

Now my requirement is if i click on number 10 in the row computers i should see all the name of employees under computers department .

Tags (1)
0 Karma
1 Solution

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

View solution in original post

0 Karma

niketn
Legend

@surekhasplunk, this seems to be a rephrased duplicate of the following question: https://answers.splunk.com/answers/590928/drilldown-cell-value.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

0 Karma

surekhasplunk
Communicator

Thanks it worked with $row.Department_name$ and also i have added search queries for each field passing this token along with other tokens. And disabling drilldown for few cells.

Thanks

0 Karma
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...